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[57] ABSTRACT 

An IC card includes, in addition to an ordinary data 
recording processing circuit, an IC chip area including 
an encrypting circuit, and a magnetic or optical data 
recording unit mounted thereon. Those items of data at 
an initialization and final transaction times are recorded 
in the magnetic or optical data recording unit while a 
predetermined encryption is made in cooperation with 
the IC chip area and the terminal for initialization and 
terminal for transaction. When a data item to be re- 
corded n the IC chip area in the IC card is destroyed, 
data items recorded on the magnetic or optical data 
recording area are 'decrypted to check if the recorded 
data items are true. If yes, these data items are restored 
in a new card. 

3 Claims, 1 Drawing Sheet 
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IC CARD SYSTEM HAVING A FUNCTION OF 
AUTHENTICATING DESTROYED DATA 

BACKGROUND OF THE INVENTION 5 

The present invention relates to an IC card system 
and, in particular, an IC card system of such a type that, 
even if, upon the use of an IC card as a "prepaid" card 
for instance, data is found to be destroyed owing toa 
damaged IC chip, etc., data items, such as a 4t prepaid" 10 
balance, recorded in the IC card can be identified by the 
IC card and the terminal in a self-solving way without 
using any large-scale on-line system and can be restored 
with added safety, 

A prepaid card, such as a conventional prepaid tele* 15 
phone card, is not safe from the standpoint of security, 
such as the protection of secret data and prevention of 
tampering. In the conventional prepaid card system, 
when data items in the prepaid card are maliciously or 
inadvertently destroyed by a card owner or any third 20 
party, there is no safe countermeasure for restoring data 
on a "prepaid" balance. 

An IC card equipped with an IC version of a data 
storing/processing circuit is outstandingly superior to 
other cards from the standpoint of security, such as the 25 
protection of secret data and prevention of the tamper- 
ing of data. 

There is a relatively high possibility that, because 
such an IC chip is embedded in a plastics card, data 
items in the card will be destroyed, not to mention 30 
damage to the IC itself. Further, in the event of the data 
items being destroyed in the card, it is not possible to 
identify data, such as a "prepaid* 1 balance. Even if any 
dispute arises between a card owner and a card issuing 
person in connection with the "prepaid'* balance, there 35 
has been no effective solution to such a problem. 

There is, therefore, a growing demand for identifying 
and restoring data items in the IC card system as set out 
above. An effective measure, therefore, is necessary to 
readily identify damaged data without using any large- 40 
scale on-line system and to prevent any possible misuse 
upon the re-issuing of an I C card. 

It is an object of the present invention to provide an 
unproved IC card system in which final transaction data 
items, once disturbed by encryption, are recorded in a 45 
magnetic or optical data recording unit whereby, when 
data items in the IC card are destroyed, the recorded 
data items are read out of the data recording unit to 
enable the read-out data items to be readily identified 
for their truth. 50 

Another object of the present invention is to provide 
an IC card system which, when data items read out of a 
magnetic or optical data recording unit is proved true, 
restores the true data items in a new IC card. 

SUMMARY OF THE INVENTION 55 

According to the present invention, there is provided 
an IC card system for enabling data which is stored in 
an IC card equipped with an IC chip area and a mag- 
netic or optical data recording area at its predetermined 60 
area to be authenticated in cooperation with a predeter- 
mined terminal, the system comprising: 

a first unit for enabling data which is associated with 
a final transaction by the IC card to be subjected to 
a predetermined processing, including an encryp- 65 
tion processing, by a predetermined data process 
made between an encrypting area stored in an IC 
area of the IC card and a read/write unit in a termi- 
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nal for identification and between the read/write 
unit and a common processing unit; 
a second unit for enabling data which is subjected by 
the first means to the processing to be transferred 
to the magnetic or optical data recording area via 
the read/write unit on the terminal and to be re- 
corded there; and 
a third unit for enabling the processed data associated 
with the final transaction which is recorded on the 
magnetic or optical data recording area to be sub- 
jected to a predetermined re-processing, including 
a decryption processing at the read/write unit and 
common processing unit, when the data in the IC 
area of the IC card is destroyed, and for authenti- 
cating truth of the data. 
According to another aspect of the present invention, 
an IC card system includes a fourth unit which, when 
the truth of the data re-processed by the third unit is 
authenticated, transfers that data from the terminal for 
identification to the terminal for initialization and re- 
stores it into a new card. 
In summary, the present IC card system comprises: 
a first unit for performing a predetermined data pro- 
cessing, including an encryption processing, rela- 
tive to an initializing or transaction terminal in 
cooperation with an IC card and a code prepara- 
tion unit in the IC card; 
a second unit for recording final transaction data in a 
magnetic or optical data recording area of the IC 
card after it has been disturbed by a predetermined 
code; and 

a third unit for decrypting the data of the recording 
unit by the identifying terminal, when it is needed 
for restoration, so that it is identified for truth. The 
present IC card system further comprises a fourth 
unit which, when the data is proved true, enables 
data on a "prepaid" balance, etc., to be restored by 
the initializing terminal for re-issuing of a new IC 
card 

In the IC card system as set out below, when an IC 
chip of the IC card is inaccessible due to its damage, etc 
, the card owner requests the card issuing person to 
restore data on, for example, a "prepaid" balance so that 
it is re-issued 

The card issuing person re-processes final transaction 
data of the magnetic or optical data recording area 
through decryption with the use of an identifying termi- 
nal, for example, a card owner's built-in code function F 
and code key and prepares an identification code and 
compares it with an identification code which is read, as 
a to-be-re-processed data, out of the magnetic or optical 
data recording area If there is a coincidence between 
the two, the card issuing person authenticates it as being 
true, restores the final transaction data and issues a 
novel IC card. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIGS. 1 to 3 show an IC card system according to 
one embodiment of the present invention, FIG. 1 show- 
ing a state of a connection between an initializing termi- 
nal and an IC card as well as a data transfer between 
them and its control, FIG. 2 showing a state of a con- 
nection between a transaction terminal and an IC card 
as well as a d-ta transfer between them and its control, 
and FIG. 3 showing a state of a connection between the 
IC card and an identifying terminal for identifying data 
of a magnetic or optical data recording area when data 
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once stored in the IC card, if damaged, is restored, as user IC card UC which has been given to the card 
well as a data transfer between the IC card and the owner after initialization. 

terminal and its control. FIG. 2 shows the case where a card owner inserts or 

loads the user IC card UC into a transaction terminal 
DETAILED DESCRIPTION 5 unit jj as j nsta ]] e <j at a s j, op or at a slreet CO rner. 

An IC card system according to one embodiment of Those items of transaction data (hereinafter referred 

the present invention will be explained below with ref- to as transaction data TD (1) for the sake of conve- 

erence to the accompanying drawings. nience) entered from an output section (an input/output 

FIG. 1 shows a state of a connection between an unit 11A) of the transaction terminal TT or automati- 
initializing terminal unit Tl and an IC card 20 and a data 10 cally generated from a common control unit 12A are 

transfer between the two and its control which consti- added to a history at a time of card issuance, or updated 

tute one aspect of a restoration device of the present via a read/write unit 13A, the transaction data contain- 

invention. ing a transaction data, site-of-transaction (terminal) 

An initializing terminal unit Tl which is placed under code, amount of transaction, "prepaid" balance, prepay- 
complete control of an IC card issuer as his or her agent 15 ment and so on and being the same format as that of the 

includes an input/output unit 11, common treating units aforementioned issuing data TD (1). 

12 and read/write unit 13. The IC card 20 is initialized Transaction data TD (1) involved in a final transac- 
by the terminal Tl and handed over to a specific person tion as well as an authentication code (hereinafter re- 
who becomes a card owner. ferred to as an identification code TC (2) for the sake of 

The IC card 20 to be used by the card owner includes 20 convenience) generated in the same format as that of the 

a magnetic/optical data recording area 21 and IC chip identification code TC (2) is encrypted via the read/- 

area 22. write unit 13A and written into a magnetic/optical data 

The IC chip area 22 includes, in addition to an ordi- storing area 21A in the user IC card UC 

nary data storing/processing unit, a circuit (a code pre- Although a step of charging or receiving a price or a 

paring unit) for processing a code function (F), both of payment for goods and services, by a goods/services 

which are absolutely inaccessible from the outside. A provider or an agent, as a result of a transaction is omit- 

code key KUC which is unique to the IC card 20 is ted for brevity's sake, it is done in the process substan- 

accessible by only a specific terminal, etc., which is tially the same as set forth above, 

owned or designated by a card issuer, and is initially 3Q Let it be assumed that data in the chip area 22A in the 

stored in a chip area 22 of the IC card. user TC card UC cannot be read out due to a breakage, 

Those items of issuing data (that is, issuing data TD etc., of the IC chip area 22A and that a transaction fails 

(1)) as input from the input/output unit 11 in the termi- to continue owing to a "prepaid" balance being placed 

nal unit Tl or automatically generated from the process- in an inaccessible state. 

ing unit 12 are stored as initial history data into the IC 35 In this case, the owner of the user IC card presents a 

ship area 22 of the IC card 20 from the read/write unit defective IC card UC to the card issuing person or his 

13 in the initializing terminal unit Tl, the items of data or her agent, claiming that a "prepaid" balance should 
containing the data of issuing, placeof-issuing (initial- be guaranteed. The card issuing person or his or her 
izing terminal ID) code, amount of money received agent handles a restoring terminal TA as shown in FIG. 
upon issuance, a "prepaid" balance upon issuance, etc. 40 3 in accordance with the claim of the card owner and 

A symbol (1) in the issuing data TD (1) represents the restores and identifies that "prepaid" balance. The card 

transfer of data on the drawing sheet. The same thing issuing person or his or her agent takes a proper step 

can be applied to those items of data and code as will be such as the reissuing of an IC card to guarantee the 

set forth below. "prepaid" balance. 

The data TD (1) and authentication code, hereinafter 45 That is, on the side of the card issuing person or his or 

referred to as [identification code TC (2)] generated her agent, a code key KUC of the user IC card UC is 

based on the data TD (1), are registered in the mag- arithmetically operated on by the terminal TA in accor- 

netic/ optical data storing area 21 of the IC card 20. dance with a secret key KAC and the same function F 

The identification code TC (2) is a multi-digit code as a code function built in the user IC card UC of the 

uniquely determined by the issuing data TD (1). that is, 50 card owner as well as a card recognition data recorded 

a result of an arithmetic operation obtained in accor- in magnetic or optical data recording unit 21B msenbed 

dance with a function F using the code key KUC and in the IC card, noting that the key KAC and function F 

transaction data TD (1), the function F being incorpo- can be stored in an authentication-only IC card so as to 

rated into the chip area 22 in the IC card 20. The code further enhance a security level. An identification code 

TC (2) is taken into the IC card via the read/write unit 55 TC (3) is generated, in the same way as set out above, 

13 in the terminal unit Tl. from the code ^ KUC thus obtained and transaction 

The terminal unit Tl encrypts the identification code data TD (1) m those items of data read out of the mag- 
TC (2 together with the data TD (1) and delivers it via netic or optical data recording area 21B. This identifica- 
the read/write unit 13 to the magnetic or optica! data tion code (3) is compared with an identification code 

recording unit 21 where it is stored. 60 TC (2) in those data items which are read out of the 

A relation among the code function F, data TD, magnetic or optical data recording area 21B. 

identification code TC and code key KUC is repre- If a coincidence occurs as 1 1 result of comparison the 

sented by transaction data TD1 in the data items read out of the 

magnetic or optical data recording area 21 A can be 

TC~F(TD, KUC) 65 regarded as being not maliciously altered by something. 

The card issuing person or his or her agent performs 

FIG. 2 shows a data transfer, that is, goods or ser- an issuing operation of a new IC card 20 (UC), in accor- 
vices transferred, by a prepaid action, with the use of a dance with the sequence as set out in connection with 
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FIG. 1, with the use of a "prepaid" balance on a final 
transaction in the read-out transaction data TD (1). 

Although the present embodiment has been explained 
in connection with the present invention, when the 
transaction terminal TT delivers transaction data TD 
(1) and identification code TC (2) to the magnetic or 
optical data recording area, TD (1) and TC (2) are 
encrypted as a whole for enhanced security to place an 
encrypted one generally under an inaccessible state and 
encryption is done prior to the process of restoring and 
identifying data, such as a "prepaid" balance, regarding 
a final transaction by the terminal TA. This modifica- 
tion constitutes an extension and hence another applica- 
tion which is covered by the present invention. 

The IC card system of the present invention is oper- 
ated as set out above. That is, the final transaction data 
of the IC card, once disturbed by the code, is registered 
in the magnetic or optical data recording area, It is, 
therefore, difficult for any malicious person to read out 
the final transaction data. Even if the data is tampered 20 
with, identification can be made, upon request by the IC 
card owner, on the card issuing person's side, whether 
or not the data in the magnetic or optical recording area 
is tampered with. Since data, such as a "prepaid" bal- 
ance, cannot be restored in a new IC card unless the 25 
card owner confirms the truth of the data, it is possible 
to prevent any misuse of the card upon re-issuing of it. 

Since the present IC card system has the features as 
set out above, if the card owner asks the card issuing 
person to replace a damaged card by a new one, the 30 
person can readily confirm the truth of final transaction 
data in the IC card without using any large-scale on-line 
system and re-issue a new IC card with a restored true 
"paid" balance, etc., registered therein, preventing any 



1. An IC card system for enabling data, which is 
stored in an IC card having an IC chip area and an 
optical data recording area at a predetermined area on 
the IC card, to be authenticated in cooperation with a 
predetermined terminal, said IC card system compris- 
ing: 

first means for enabling data, which data is contained 
in connection with a final transaction by the IC 
card, to be subjected to a processing operation with 
a transaction authentication code generated in ac- 
cordance with a code function and an authentica- 
tion individual key specific for the IC card, the 
processing operation being done through predeter- 
mined data processing made between an external 
terminal including a common processing unit and 
an external read/write unit, said terminal being an 
initialization terminal or a transaction terminal, and 
said first means further including means for storing 
the resulting processed data in the IC chip area of 
the IC card; 

second means for transferring said resulting pro- 
cessed data to the optical data recording area of the 
IC card via the read/write unit of the terminal and 
for recording said resulting processed data on said 
optical data recording area of the IC card; and 

third means for checking said resulting processed 
data associated with the final transaction which is 
recorded on said optical data recording area, for 
truthfullness with the use of a code or decoding 
function of said rear/write unit and common pro- 
cessing unit, when data in the IC chip area of the 
IC card is destroyed. 

The system according to claim 1, further compris- 
fourth means for, when the truth of the data 



2. 
ing 



trouble from arising between the card issuing person 35 checked by said third means is authenticated as being 



and the card owner. The present IC card system ensures 
high security and hence very high safety. 

The present invention can be applied to an IC card 
system, in general, performing, for example, an individ- 
ual authentication, data management and credit transac- 
tion. 

We claim: 



40 



true, transferring that data from said transaction termi- 
nal to said initialization terminal and for restoring the 
transferred data into a new IC card. 

3. The system according to claim 1, wherein said data 
checked by said third means contains data on a prepaid 
balance. 

***** 
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